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LOGIC CIRCUIT PROTECTED AGAINST TRANSIENT DISTURBANCES 




The present invention relates to digital circuits 
insensitized to external disturbances, especially to localized 
disturbances coming in particular from heavy ion bombardments. 

Such a disturbance is likely to untimely switch the 
5 state of a memory point, and specific memory point structures 
must be adopted to overcome this disadvantage. 

With past integrated circuit manufacturing technolo- 
gies, a memory point was only likely to switch if the disturbance 
directly affected this memory point. For example, a heavy ion had 
10 to reach one of the transistors forming the memory point. Distur- 
bances occurring outside of the memory points, that is, in 
combinatory logic circuits, had a very low probability of modify- 
ing the state of memory points. Indeed, such disturbances would 
translate as very short pulses, which would be practically 
15 filtered out by the high capacitances of the conductors. Even if 
such a disturbance caused a parasitic pulse reaching the input of 
a memory cell, this pulse had a low probability of modifying the 
state of the memory cell. 

With recent technologies, the capacitances of conduc- 
2 0 tors become smaller and smaller and the circuits, especially 
memory cells, react more and more rapidly, so that parasitic 
pulses caused by disturbances have sufficient durations to modify 
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the memory cell state if they occur in the vicinity of an edge of 
a clock which clocks the memory cells. 

Thus, if it is desired to insensitize a digital circuit 
of recent technology to localized disturbances, it is not enough 
5 to insensitize the memory points, but it must also be avoided for 
parasitic pulses that could be generated outside of the memory 
points to reach the memory points. 

The generation of a parasitic pulse by a combinatory 
logic circuit can be considered as a mistake that could be 
10 corrected by a conventional solution. 
^ Fig. 1 illustrates a conventional solution that could 

be used to correct errors generated by a combinatory logic 
circuit. It is a triple -redundancy error- correcting circuit. A 
same combinatory logic circuit 10 is duplicated twice, respec- 
jp? 15 tively at 11 and 12. The outputs of circuits 10 to 12 are 
m provided to a majority vote circuit 14, which outputs the value 

1^ which is provided by at least two of redundant circuits 10 to 12. 

?rt The output of majority vote circuit 14 is thus error- free in case 

M* of a failure of at most one of redundant circuits 10 to 12, even 

2 0 if this failure xs permanent. 

fy Of course, this solution triples the silicon surface 

area of the integrated circuit. 

There are other solutions, which consist of generating 
error- correcting codes for the outputs of a circuit. When all the 
25 outputs of a circuit are desired to be corrected, this solution 
is equivalent, in terms of surface area, to the triple redundancy 
of Fig. 1. 

An object of the present invention is to provide a 
solution to remove at the output of a combinatory logic circuit 

3 0 any parasitic pulse caused by a localized disturbance, while 

occupying a relatively small silicon surface area. 

To achieve this object, the present invention provides 
a circuit protected against transient disturbances, including a 
combinatory logic circuit having at least one output; a circuit 
35 for generating an error control code for said output; and a 



memory element arranged at said output, controlled by the control 
code generation circuit to be transparent when the control code 
is correct, and to keep its state when the control code is incor- 
rect. 

According to an embodiment of the present invention, 
the error control code generation circuit includes a circuit for 
calculating a parity bit for said output and a circuit for check- 
ing the parity of the output and of the parity bit. 

According to an embodiment of the present invention, 
the error control code generation circuit includes a duplicated 
logic circuit, said memory element being provided to be transpar- 
ent when the outputs of the logic circuit and of the duplicated 
circuit are identical, and to keep its state when said outputs 
are different. 

According to an embodiment of the present invention, 
the error control code generation circuit includes an element for 
delaying said output by a predetermined duration greater than the 
maximum duration of transient errors, said memory element being 
provided to be transparent when the outputs of the logic circuit 
and of the delay element are identical, and to keep its state 
when said outputs are different. 

According to an embodiment of the present invention, 
said memory element is formed from a logic gate providing said 
output of the logic circuit, this logic gate including at least 
two first transistors controlled by a signal of the logic circuit 
and at least two second transistors controlled by the correspond- 
ing signal of the duplicated circuit, each of the second transis- 
tors being connected in series with a respective one of the first 
transistors . 

The present invention also provides a circuit protected 
against transient disturbances, including a combinatory logic 
circuit having at least one output connected to a first synchro- 
nization flip-flop rated by a clock, a second flip-flop connected 
to said output and rated by the clock delayed by a predetermined 



duration, and a circuit for analyzing the outputs of the flip- 
flops . 

According to an embodiment of the present invention, 
the analysis circuit indicates an error if the flip-flop outputs 
are different. 

According to an embodiment of the present invention, 
the circuit includes a third flip-flop connected to said output 
and rated by the clock delayed by twice the predetermined 
duration, the analysis circuit being a majority vote circuit. 

The present invention further provides a circuit 
protected against transient disturbances, including a combinatory 
logic circuit having at least one output connected to a first 
synchronization flip-flop rated by a clock, a second flip-flop 
rated by the clock and receiving said output delayed by a prede- 
termined duration, and a circuit for analyzing the flip-flop 
outputs . 

According to an embodiment of the present invention, 
the analysis circuit indicates an error if the flip-flop outputs 
are different. 

According to an embodiment of the present invention, 
the circuit includes a third flip-flop rated by the clock and 
receiving said output delayed by twice the predetermined 
duration, the analysis circuit being a majority vote circuit. 

The present invention further provides a circuit 
protected against transient disturbances, including three identi- 
cal logic circuits. Each of the logic circuits is preceded by a 
two- input memory element respectively receiving the outputs of 
the two other logic circuits, each memory element being provided 
to be transparent when its two inputs are identical, and to keep 
its state when the two inputs are different. 

According to an embodiment of the present invention, 
the logic circuits are inverters and the memory elements include, 
in series, two P- channel MOS transistors and two N- channel MOS 
transistors, a first one of the inputs of the memory element 
being connected to the gates of a first one of the P-channel MOS 
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transistors and of a first one of the N- channel MOS transistors, 
and the second input of the memory element being connected to the 
gates of the two other transistors. 

The foregoing and other objects., features and 
5 advantages of the present invention, will be discussed in detail 
in the following non- limiting description of specific embodiments 
in connection with the accompanying drawings, wherein: 

Fig. 1, previously described, illustrates a conven- 
tional solution for correcting errors generated by a failing 
1 0 circuit / 

Fig. 2A schematically shows a first embodiment of a 
circuit according to the present invention enabling suppression 
of parasitic pulses generated by localized disturbances in a 
combinatory logic circuit; 

Fig. 2B shows a timing diagram illustrating the opera- 
tion of the circuit of Fig. 2A; 

Figs. 3A and 3B show two examples of state-keeping 

elements used in the circuit of Fig. 2A; 

Fig. 4 schematically shows a second embodiment of the 
circuits according to the present invention enabling suppression 

of parasitic pulses; 

Fig. 5 shows an example of a state-keeping element used 

in the circuit of Fig. 4; 

Figs. 6A, 6B, and 6C show other examples of state- 

2 5 keeping elements of the type used in the circuit of Fig. 4; 

Fig. 7A schematically shows a third embodiment of a 
circuit according to the present invention enabling suppression 

of parasitic pulses; 

Fig. 7B shows a timing diagram illustrating the opera- 

3 0 tion of the circuit of Fig. 7A; 

Fig. 8A shows an alternative to the embodiment of Fig. 

7A; 

Fig. 8B shows a timing diagram illustrating the opera- 
tion of the circuit of Fig. 8A; 
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Fig. 9A shows a fourth embodiment of a circuit accord- 
ing to the present invention enabling suppression of parasitic 
pulses ,- 

Fig. 9B shows a timing diagram illustrating the opera- 

5 tion of the circuit of Fig. 9A; 

Fig. 10A schematically shows a fifth embodiment of a 
circuit according to the present invention enabling suppression 

of parasitic pulses; 

Fig. 10B shows a timing diagram illustrating the opera- 

10 tion of the circuit of Fig. 10A; 

Fig. 11 shows an application of the embodiment of Fig. 

4 to an asynchronous loop; 

Fig. 12 shows an improvement of the structure of Fig. 

11 ' 

15 F ig. 13 shows a simplification of the structure of Fig. 

12; 

Fig. 14 shows an application of the principle of Fig. 
13 to a static memory cell; and 

Fig. 15 shows a majority vote circuit formed from the 

2 0 structure of Fig. 14. 

Several solutions are provided according to the present 
invention- to suppress parasitic pulses generated by a combinatory 
logic circuit after a localized disturbance, for example due to a 
heavy ion bombardment. All these solutions, to reach particularly 

25 simple structures, exploit the fact that the parasitic pulses 
form transient, and not permanent, errors. The embodiments of the 
present invention thus avoid use of conventional solutions, with 
a triple redundancy or multiple error correction codes, intended 
to correct a permanent failure of a circuit. 

30 Fig. 2A schematically shows a first embodiment of the 

present invention exploiting this feature. A combinatory logic 
circuit 10 is associated with a checking circuit 20 which 
provides an error control code P for the output A of logic 
circuit 10. Circuit 20 is for example a circuit which conven- 

35 tionally calculates a parity bit P for output A of logic circuit 
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10, with, of course, the possibility for output A to be multiple. 
At 22, parity bit P is combined by X-OR with output A of logic 
circuit 10, which provides an error signal E which is active when 
the parity is bad, that is, when output A or parity bit P 
includes an error. 

Error signal E and output A are provided to what will 
be called a "state-keeping" element 24. This actually is a memory 
element similar to a controlled transparency flip-flop, that is, 
having a first mode, selected when error signal E is inactive, 
where output A is transmitted as such to output S of element 24. 
in a second mode, selected when error signal E is active, element 
24 keeps the state of output A such as it was before activation 

of error signal E. 

A flip-flop 26, conventionally provided to lock the 
15 output of logic circuit 10, receives output S of state -keeping 
element 24 instead of directly receiving output A of circuit 10. 
Flip-flop 26 is rated by a clock CK intended to make the output 
of circuit 10 synchronous with the outputs of other circuit. 
Flip-flop 26 is a register in the case where output A is multi- 
ple. This flip-flop or this register have, preferably, a 
structure insensitive to localized disturbances. 

Fig. 2B shows a timing diagram illustrating the opera- 
tion of the circuit of Fig. 2A. At a time t 0 , when a first active 
edge of clock CK appears, output A of logic circuit 10 is at any 
state X. Error signal E being inactive, element 24 is in 
"transparent" mode and transmits state X on its output S. State X 
is locked in flip-flop 26. The output of flip-flop 26 being 
possibly fed back into logic circuit 10, this logic circuit 
generates a new output A after a delay t c corresponding to the 
propagation time in the "critical path" of circuit 10. 

At a time t x , output A of circuit 10 switches states, 
for example, switches to 0. The same occurs for output S of 
element 24, which is again set to the "transparent" mode by 
signal E. 
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At a time t 2 starts a parasitic pulse on output A, 
which ends at a time t 3 . Fig. 2B illustrates an unfavorable case 
where the parasitic pulse on signal A risks causing an untimely 
modification of the state of flip-flop 26. In this example, the 
end of the parasitic pulse coincides with the next active edge of 
clock CK, which edge causes the memorization in flip-flop 26 of 
the state of output S immediately preceding time t 3 . Now, error 
signal E becomes active for the duration t p of the parasitic 
pulse, making element 24 "opaque" to the variation of signal A 
between times t 2 and t 3 . Accordingly, signal S does not switch 
states during the parasitic pulse and the flip-flop 26 memorizes 

a correct value. 

A flip-flop only switches states if the new state has 
been presented long enough thereto before the corresponding 
active clock cycle, for a so-called initialization duration. In 
fact, a risk of memorizing an erroneous value by flip-flop 26 
appears in a variation range of the position of the parasitic 
pulse, from a position where the end of the pulse precedes the 
active edge of clock CK by the initialization duration, to a 
position where the beginning of the pulse occurs at the time of 
the active edge of clock CK. 

Further, given that state-keeping element 24 also is a 
memorization cell, the state that it must memorize must have been 
presented at least for one initialization time before the memori- 
zation order (activation of signal E) . Thus, it is necessary for 
the duration separating times t x and t 2 to be longer that this 
initialization time. Further, it must also be guaranteed that an 
entire initialization time of element 24 has elapsed before or 
after the parasitic pulse between times t x and t 3 , this to be 
sure that element 24 takes account of the level outside of the 
pulse . 

These constraints impose the choice of a minimum dura- 
tion of the period of clock CK, equal to t c + 2th2 4 + t p + th 2 6' 
where t c is the propagation time in the critical path of logic 
circuit 10, t h2 4 is the initialization time of element 24, t p is 



the maximum duration of a parasitic pulse , and t h2 e is the 
initialization time of flip-flop 26. In some cases, especially if 
element 24 has a capacitive memorization effect, this period can 

be reduced by tft24* 

This solution thus requires, with respect to a normal 
logic circuit, increasing the clock period. Indeed, in a normal 
circuit, the clock period must only be greater than t c + tj^e- 
However, due to this time redundancy, the circuit provides the 
same security level as a conventional triple -redundancy circuit 
(Fig. 1) with a substantially lower hardware cost. 

A state-keeping element 24 will generally be formed 
from logic gates providing the outputs of combinatory logic 
circuit 10 to flip-flops 26. 

Figs . 3A and 3B show two examples of state-keeping 
elements performing a two- input NAND function. Both inputs a and 
b will be provided to an AND gate 30 having its output connected 
to a first input of a NOR gate 32. An XOR gate 22 1 , equivalent to 
XOR gate 22 of Fig. 2A, receives inputs a and b, as well as 
parity bit P. Output E of gate 22 1 is provided to a second input 
of NOR gate 32 and to a first input of an AND gate 34. The 
outputs of gates 32 and 34 are provided to an OR gate 36, which 
provides output S of the state-keeping element, which output is 
looped back on a second input of AND gate 34. 

When there is no parity error, signal E is at zero. 
Then, the output of AND gate 30 is inverted by NOR gate 32 and 
transmitted to output S by OR gate 36. 

In case of a parity error, signal E is at 1, causing a 
memorization of the state of output S in a memory point formed by 

gates 34 and 36 . 

The circuit of Fig. 3A requires four gates to perform 

the function of a single gate. 

Fig. 3B shows a solution requiring less hardware to 
form a state-keeping element performing a NAND function. Input 
signals a and b are provided to the two inputs of a NAND gate 38 
having its output connected to a capacitor C via a switch K. 
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Switch K is controlled by error signal E provided by XOR gate 
22 ' . 

When error signal E is inactive, switch K is closed and 
capacitor C charges to the level provided by gate 38. When error 
signal E is activated, switch K is open, but the state of output 
S of the element is kept by capacitor C for the duration of the 
parasitic pulse. It should be noted that capacitor C can be 
formed by the mere capacitance of output line S. 

State-keeping elements performing other logic functions 
may be formed by those skilled in the art. For example, to 
perform the identity function while using the solution of Fig. 
3B, the single input signal is directly provided to switch K. 

The embodiment of Fig. 2A has the disadvantage, espe- 
cially if the number of outputs A of logic circuit 10 is large, 
that XOR gate 22, with several inputs, reacts with a significant 
delay to activate error signal E. This results in that a portion 
of the beginning of the parasitic pulse is transmitted to output 
S. However, in most cases, the duration of this pulse portion 
will be smaller than the initialization time of flip-flop 26 and 
accordingly does not affect its state. 

Fig. 4 shows an embodiment avoiding this disadvantage. 

Combinatory logic circuit 10 is duplicated once at 11. 
Output A of circuit 10 and duplicated output A* of circuit 11 are 
provided to a state-keeping element 24' which transmits on its 
output S the state of its input A or A* when inputs A and A* are 
identical and which keeps its state when inputs A and A* become 
different. 

The operation of this circuit is similar to that of 
Fig. 2A, considering that a condition where inputs A and A* are 
different corresponds to the activation of error signal E in Fig. 
2B. 

Fig. 5 shows a state-keeping element 24- of the circuit 
of Fig. 4 implementing a two- input AND function. Inputs a and b 
are provided to an AND gate 50 having its output provided to a 
first input of an AND gate 52 and to a first input of an OR gate 
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54. Duplicated inputs a* and b* are provided to an AND gate 56 
having its output connected to the second input of gate 52 and to 
the second input of gate 54. The outputs of gates 52 and 54 are 
respectively connected to gates 36 and 34 similar to gates 36 and 
34 of Fig. 3A. 

It should be noted that gates 34, 36, 52, and 54 form a 
state-keeping element having the logic "identity" function. To 
create any logic function, it is enough to connect two gates, 
each conventionally implementing this function, to gates 52 and 
54 . 

According to another embodiment, the state -keeping 
elements are formed based on the internal structure of conven- 
tional logic gates. For this purpose, two series -connected 
transistors are provided for each transistor normally required in 
the conventional gate. The two transistors are controlled to be 
turned off at the same time, so that, if one of them turns on due 
to a disturbance, the second, remaining off, prevents any 
untimely current flow. Such a configuration is particularly well 
adapted to a structure of the type of that in Fig. 4, including 
two redundant logic circuits. Indeed, the two transistors of the 
series association are then respectively controlled by a signal 
and by its duplicated signal. 

Fig. 6A shows a state-keeping element according to this 
principle having an inverter function. Output S of the circuit is 
connected to a high voltage via two P-channel MOS transistors in 
series, MP1 and MP2 . Output S is also connected to a low voltage 
by two N-channel MOS transistors in series MN1 and MN2 . A first 
one of the two P-channel MOS transistors and a first one of the 
two N-channel MOS transistors are controlled by a normal signal a 
while the remaining transistors are controlled by the duplicated 
signal a* . 

If signals a and a* are equal, which corresponds to a 
normal operation, the two MP transistors or the two MN transis- 
tors are on and force output S to the corresponding voltage to 
perform the inverter function. 
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If signals a and a* are different, at least one of 
transistors MP and at least one of transistors MN is off, whereby 
output S is floating and keeps its preceding level by capacitive 
effect . 

5 Fig. 6B shows a state-keeping element performing a NOR 

function. Its output S is connected to a high voltage via four P- 
channel MOS transistors in series, respectively controlled by the 
normal input signals a and b and their duplicated signals a* and 
b* . Output S is also connected to a low voltage via two series 

10 associations of N-channel MOS transistors, one of them including 
two transistors respectively controlled by signals a and a*, the 
other including two transistors respectively controlled by 
signals b and b* . 

Fig. 6C shows a state-keeping element performing a NAND 

15 function. Output S is connected to the low voltage via four N- 
channel MOS transistors in series respectively controlled by 
signals a and b and their duplicated signals a* and b* . Output S 
is also connected to the high voltage via two series associations 
of P-channel MOS transistors, the first one including two 

2 0 transistors respectively controlled by signals a and a*, and the 
second one including two transistors respectively controlled by 
signals b and b* . 

The elements of Figs. 6B and 6C operate according to 
the principle described in relation with Fig. 6A. More generally, 

2 5 this principle of arranging duplicated transistors in series 

applies to any logic gate. 

The circuit of Fig. 6A can be used as a dynamic memory 
cell insensitive to disturbances. For this purpose, the cell 
state is stored redundantly on both inputs a and a* by capacitive 

3 0 effect. If one of the inputs is disturbed, output S keeps its 

preceding state by capacitive effect, until the cell refreshment 
restoring the correct state of the disturbed input. This princi- 
ple also applies to any state-keeping element (Figs. 3A, 3B, 5, 
6B, 6C) . For this purpose, it is enough to use a storage element 
35 (capacitor, static memory) on the inputs of the state-keeping 
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element, and to lock the values provided by output A of circuit 
10 and by the output of the error- checking circuit (20, 11) . 

Other state-keeping elements may also be used, such as 
a specific storage element described in "Upset Hardened Memory 
5 Design for Submicron CMOS Technology" , 33 rd International Nuclear 
and Space Radiation Effects Conference, July 1996, Indian Wells, 
California, by T. Calin, M. Nicolaidis, R. Velazco. 

Fig . 7A shows a third embodiment of a combinatory 
circuit according to the present invention, insensitive to local - 
10 ized disturbances. It includes a single logic combinatory circuit 
^ 10* The suppressing of parasitic pulses is exclusively obtained 

,S by means of a t ime redundancy , conversely to the preceding 

Jfij embodiment combining the time and hardware redundancy. Output A 

3K of circuit 10 is provided to three flip-flops 70, 71, and 72 

P 15 respectively rated by clock CK, by clock CK delayed by a duration 
5t 5, and by clock CK delayed by a duration 28. Outputs SI, S2, and 

* S3 of these flip-flops are provided to a majority vote circuit 74 

^ which provides corrected output S. 

M= Fig. 7B shows a timing diagram illustrating the opera- 

te 2 0 tion of the circuit of Fig. 7A. This timing diagram show, in the 
fij form of vertical bars, the active edges of clock signals CK, 

CK+5, and CK+25. It is assumed that signal A exhibits a parasitic 
pulse overlapping the first edge of clock CK, occurring at a time 
t 0 . Flip-flop 70, activated at time t 0 / erroneously stores the 
25 state of the parasitic pulse. 

At a time t2, signal A switches normally to 1. This 
transition occurs one time interval t c after a time t^ of occur- 
rence of the last edge of clock CK+28. Time t c is the propagation 
time through vote circuit 74 and logic circuit 10 . 
3 0 At times t3, t 4 , and t 5 , state 1 of signal A is sampled 

by the next respective edges of clocks CK, CK+8 and CK+28. Signal 
SI remains at 1 while signals S2 and S3 switch to 1, respectively 
at times t3 , t 4 and t5 . 
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One time interval t c after time t 5 , signal A switches 
to 0. As a result, at the next edges of clocks CK, CK+8 and CK+2S, 
signals SI, S2, and S3 successively switch to 0, 

Output S of vote circuit 74 is at 1 when at least two 
of signals SI, S2, and S3 are at 1. This case occurs from time 
t 4 , while signal S2 is at 1. 

It should be noted that the circuit of Fig. 7A does not 
switch to 1 at time t 0 when the parasitic pulse occurs , but 
correctly switches to 1 at time t 4 as a response to a normal 
switching to 1 of signal A. 

For this embodiment to operate properly, the parasitic 
pulse must be sampled by a single one of clocks CK, CK+8, and 
CK+2S. The maximum duration t p of the parasitic pulses may for 
this purpose reach value 8 - t h , where t h is the initialization 
time of flip-flops 70 to 72. Thus, it is chosen to have 8 = t p + 
t h . Further, the clock period must be chosen to be at least equal 
to t c + 28 + th/ which time corresponds to the maximum propaga- 
tion time from the inputs of circuit 10 to output S. 

Fig. 8A shows an alternative to the embodiment of Fig. 
7A. In this drawing, same elements as in Fig. 7A are designated 
with same references, instead of rating flip-flops 70 to 72 with 
clocks delayed with respect to one another, these flip-flops are 
rated by the same clock CK. However, signal A is provided to two 
delay lines in cascade 80 and 81, each introducing a delay 8. 
Signal A is directly provided to flip-flop 70, output A2 of delay 
line 80 is provided to flip-flop 71, and output A3 of delay line 
81 is provided to flip-flop 72. 

Fig. 8B shows a timing diagram illustrating the opera- 
tion of the circuit of Fig. 8A. At a time t 0 occurs the first 
edge of clock CK. It is assumed that signal A exhibits a 
parasitic pulse overlapping this edge. As a result, signal Si 
switches to one at this time t 0 . Signals A2 and A3 exhibit the 
same parasitic pulse, but shifted respectively by 8 and 28 with 
respect to time tg . 
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Delay 8 is chosen to be greater than duration t p + t^, 
where tp is the maximum duration of a parasitic pulse and t^ is 
the initialization time of flip-flops 70 to 72. It is thus 
ensured, in the example of Fig. 8B, that the parasitic pulse of 
signal A2 is not sampled at time tg. As a result, the value of 
signal S2, and a fortiori of signal S3, remains correct (here, 
equal to 0) . 

At time ti occurs the next edge of clock CK. Signals A 
to A3 are sampled while they are at 0 . As a result, signal SI 
switches to 0 and signals S2 and S3 remain at 0 . 

At a time t2, between time t^ and the next edge of 
clock CK occurring at a time t3, signal A switches normally to 1 
during a clock period. The duration separating times t^_ and t>2 
corresponds to propagation time t c in the critical path of 
circuit 10 and in vote circuit 74. In the example shown, delay t c 
is such that the corresponding rising edge of signals A2 and A3 
occurs still before time t3 . 

Thus, at time t 3/ signals A, A2, and A3 are sanpled 
while they are at 1. Signals SI, S2, and S3 switch to 1. Signals 
SI, S2, and S3 remain at 1 until the next edge of the clock 
signal occurring at a time t 4 . At this time t 4 , signals A, A2, 
and A3 are switched to 0. As a result, signals SI, S2, and S3 
switch to 0. 

Signal S has a correct shape in remaining at 0 between 
times to and t]_, and in switching to 1 between times t.3 and t 4 , 
while signals SI, S2, and S3 are all three at 1. 

The correct operation illustrated in Fig. 8B is 
obtained provided that the minimum value of the clock period is 
equal to t c + 25 + t^. 

Fig. 9A schematically shows a fourth embodiment of a 
circuit according to the present invention enabling suppressing 
parasitic pulses. A state-keeping element 24' of the type of that 
in Fig. 4, provided to operate with duplicated signals, is here 
used. This element receives output A of logic circuit 10 and this 
same output is delayed by a delay line 90 introducing a delay 5. 
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The signal provided by delay line 90 forms duplicated signal A* . 
Output S of element 24' is provided to a flip-flop 26. 

Fig. 9B shows a timing diagram illustrating the opera- 
tion of the circuit of Fig. 9A. As in the preceding examples, 
5 signal A exhibits a parasitic pulse overlapping a first edge of 
clock CK occurring at a time tg. 

At a time t]_, before the next rising edge of clock CK 
occurring at a time t 3 , signal A switches to 1. Times to and t]_ 
are distant by propagation time t c in the critical path of 
10 circuit 10. 

_ At a time t2, also occurring before time t 3 , delayed 

ij signal A* switches to 1. 

Signals A and A* remain at 1 for one clock period and 
r gJ switch to 0 at respective times t 4 and t 5 before the next clock 

C3 15 edge occurring at time tg. 

Sj Signal S provided by state-keeping circuit 24 • only 

3 switches state at the time when signals A and A* become equal. 

STj This only occurs at time t2 when signal A* switches to 1 while 

M= signal A already is at 1, and at time t 5 when signal A* switches 

2 0 to 0 while signal A already is at 0 (the propagation time of 
m element 24 1 is here neglected for clarity reasons) . 

Thus, signal S is at 1 between times t2 and t 5 . This 
state 1 is sampled by flip-flop 26 at time t 3 , and corresponds to 
the state to be effectively sampled in signal A. 
25 The operation of this circuit is correct if the clock 

period is at least equal to t c + 5 + 2t 24 1 + tp + tft, where t24» 
is the propagation time in element 24 1 and t^ is the initiali- 
zation time of flip-flop 26. Value 5 must be chosen to be greater 
than tp — t24 » . 

3 0 Fig. 10A schematically shows a fifth embodiment of the 

circuit according to the present invention, enabling simple 
detection of an error due to a parasitic pulse. Output A of logic 
circuit 10 is provided to two flip-flops 92 and 93, one being 
rated by clock CK and the other one by the clock delayed by a 
3 5 duration 5. As an alternative, flip-flop 92 can be controlled by 
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an edge or level of a first type (rising or falling - high or 
low) of a clock CK, while flip-flop 93 is controlled by an edge 
or level of the opposite type of the same clock (falling or 
rising edge - low or high) . Outputs SI and S2 of these flip-flops 
5 are provided to a comparator 95, the output of which is provided 
to a flip-flop 97. Flip-flop 97 is rated by a clock CK+5+e, 
slightly delayed with respect to signal CK+5. Flip-flop 93 is 
here used to synchronize signal A and its output S2 may be looped 
back onto the inputs of logic circuit 10. 
10 Fig. 10B shows a timing diagram illustrating the opera- 

tion of the circuit of Fig. 10A. As in the preceding example, a 
parasitic pulse occurs in signal A overlapping an edge of signal 
W ck occurring at a time tg. As a result, signal SI switches to 1. 

S However, flip-flop 93 does not sample signal A yet and its output 

15 S2 remains unchanged (at 0) . Comparator 95 does not indicate an 
Wi inequality of signals SI and S2 yet, and signal ERR indicates no 

* error by a state 0. 

At a time t^ occurs the next edge of clock CK+5, after 
the parasitic pulse in signal A. Signal S2 remains unchanged. 
2 0 At a time t 2 , one duration e after the first edge of 

signal CK+8, occurs the next edge of clock CK+5+e, which edge 
causes the sampling of the comparator output by flip-flop 97. 
Signals SI and S2 being different, error signal ERR is activated. 

At a time t3, one interval t c after time t]_, signal A 
2 5 normally switches to 1. This state 1 is sampled by clock CK at a 
time t 4 . Signal SI remains at 1 . 

At a time t 5 occurs the next edge of clock CK+5, which 
samples signal A while said signal still is at 1. Signal S2 
switches to 1. Signal A will switch to 0 after propagation inter- 
30 val t c . 

At a time t^ occurs the next edge of clock CK+S+e, which 
samples the output of comparator 95. Signals SI and S2 being at 
the same state, error signal ERR is deactivated. 
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At a time t 7 occurs the next edge of clock CK, which 
samples signal A while said signal is at 0 . Signal SI switches to 
0. 

At a time ts occurs the next edge of clock CK+S, which 
5 samples signal A while said signal is at 0. As a result, signal 
S2 switches to 0 . 

The clock period must be chosen to be at least equal to 
fc c + + duration 8 being at least equal to duration tp + t^. 

According to an alternative, not shown, of the circuit 
10 of Fig. 10A, output SI is exploited. Then, it must be ascertained 
that a transition of output SI is not propagated towards output A 
before the next edge of clock CK+5. In other words, propagation 
time t c must be longer than 8. In this case, the clock period 
will be equal to t c + t^, that is, equal to the clock period of 
15 the conventional circuit with no protection against transient 
errors . 

The error signal provided by the circuit of Fig. 10A 
may be exploited in various ways to correct the detected error. 
This error signal may for example trigger an operation resump- 
2 0 tion, for example, the repeating of a last "instruction" executed 
by the system. 

It may also be used to correct a synchronization error 
due to the use of too fast a clock. In case of an error, a 
resumption is triggered and the clock frequency is reduced during 

2 5 the resumption. This is particularly advantageous in the case of 

the alternative exploiting output SI, in which the circuit 
operates at the speed of the conventional circuit. 

According to another alternative, not shown, of the 
circuit of Fig. 10A, flip-flops 92 and 93 are rated by the same 

3 0 clock CK and one of them receives signal A delayed by duration 8. 

Many digital circuit form asynchronous loops, that is, 
their outputs are directly looped back onto their inputs, without 
passing through a synchronization flip-flop. Static memory cells 
are an example of this. Such circuits are likely to memorize a 
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state and are thus sensitive to disturbances risking to switch 
this state. 

Fig. 11 shows an arrangement according to the present 
invention to protect such a circuit, using the duplication 
5 principle of Fig. 4. The output of a logic circuit 10 and the 
output of a duplicated logic circuit 11 are respectively 
connected to the two inputs of a first state-keeping element 24a 
and of a second state-keeping element 24b, both of the type of 
that in Fig. 4. The output of element 24a is looped back on 

10 circuit 10, while the output of element 24b is looped back on 
circuit 11. It is necessary to use two state-keeping elements, 
since if a single one was used, with its output looped back on 
both circuits 10 and 11, a disturbance in the element would be 
transmitted to the two duplicated circuits, causing the same 

15 error in both circuits. This error condition would not be 
corrected . 

The structure of Fig. 11 is however sensitive to a 
disturbance occurring on the output of one of the state-keeping 
elements. If the propagation time in the involved circuit 10 or 

2 0 11 is shorter than the duration of the disturbance, the delayed 

disturbance arrives onto the input of the state-keeping element 
before the disturbance has disappeared on its output. As a 
result, the element tends to keep the erroneous state affected by 
the disturbance. 

25 Fig. 12 shows a structure avoiding this problem. 

Circuit 10 and its duplicated circuit 11 are each divided up into 
two portions, 10a and 10b for circuit 10, and 11a and^ lib for 
circuit 11. Between the two portions of each circuit, an 
additional state-keeping element 24c is inserted between portions 

3 0 10a and 10b, and an element 24d is inserted between portions 11a 

and lib, elements 24c and 24d being connected in the same way as 
elements 24a and 24b. 

Fig. 13 shows a simplification of the structure of Fig. 
12, made possible if portions 10a, 10b and their duplicated 
3 5 portions have the same logic function and receive the same 
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inputs. As compared to Fig. 12, circuit lib and element 24d have 
been omitted. State-keeping elements 24a and 24b respectively 
receive the output of circuit 11a and the output of circuit 10a 
instead of the output of circuit lib of Fig. 12. 
5 Fig. 14 shows an application of the principle of Fig. 

13 to form a static memory cell. State-keeping elements 24a, 24b 
and 24c are state-keeping inverters of the type in Fig. 6A. 
Circuit portions 10a, 11a, and 10b are conventional inverters. A 
state -keeping inverter followed by a conventional inverter have 
10 an identity function. This ensures that elements 24a, 24b, and 
24c receive identical input values, which is also valid for 
inverters 10a, 11a, and 10b. 

The memory cell thus obtained is insensitive to distur- 
S bances, in static operation as well as in dynamic operation. 

S . 15 Fig. 15 shows an alternative of the cell of Fig. 14. A 

p- channel MOS transistor controlled by a clock signal CK has been 
X* inserted in series with each of the P- channel MOS transistor 

C3 pairs. An N-channel MOS transistor controlled by the complement 

2 of clock signal CK has been inserted in series with each of the 

M= 2 0 N-channel MOS transistor pairs. These transistors suppress cell 
Wi switching current surges. 

Further, Fig. 15 shows an application of the structure 
of Fig. 14 to a vote circuit usable in the circuits of Figs. 7A 
and 8A. For this purpose, with respect to Fig. 14, the access 

2 5 transistors have been omitted. The three input signals SI, S2, 

and S3 of the vote circuit are applied to the inverter inputs. 

A vote circuit which is used to memorize the result of 
the vote in a way insensitive to disturbances is thus obtained. 
If this vote circuit is used in Figs. 7A and 8A, flip-flops 70 to 

3 0 72, which come before the vote circuit, are mere controlled- 

transparency flip-flops. 

A conventional memory cell controlled by a clock signal 
may further be connected to each of inputs SI, S2, and S3. A 
master- slave flip-flop is thus formed. 
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In the foregoing description, the case where flip-flops 
sensitive to transitions are used to lock the output states of a 
logic circuit has been considered. The present invention also 
applies to flip-flops sensitive to states ( controlled - 
5 transparency flip-flops) . 
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